Bug 18275: Do not rely on CGI param userid to log a user in if auth is not required